Commit graph

  • 4f0095ef35 Default release uploads to App Store Connect main Conrad Kramer 2026-06-08 00:38:33 -07:00
  • 60cc48a4b7 Add raster panel icon family Conrad Kramer 2026-06-08 00:20:25 -07:00
  • c81712b781 Fix Burrow owl icon silhouette Conrad Kramer 2026-06-07 22:43:32 -07:00
  • 7ded0e2e69 Add low-res icon QA exports Conrad Kramer 2026-06-07 22:18:06 -07:00
  • 6c169f6b45 Refine Burrow owl icon source Conrad Kramer 2026-06-07 21:43:58 -07:00
  • a7cf38c382 Remove vendored ShadowTLS rustls forks trojan-shadowsockets-support JettChenT 2026-06-07 21:02:45 -07:00
  • 940f46bbbc Rebrand app icons around Burrow owl Conrad Kramer 2026-06-07 20:48:58 -07:00
  • ff4896a901 Keep internal TestFlight off external beta review Conrad Kramer 2026-06-07 20:34:59 -07:00
  • 0924e40463 Fix iOS App Store upload validation Conrad Kramer 2026-06-07 20:11:38 -07:00
  • fd9ea84ea5 Seal TestFlight runner autoscaler profile Conrad Kramer 2026-06-07 19:58:10 -07:00
  • feb64febc4 Use long-lived runners for TestFlight waits Conrad Kramer 2026-06-07 19:49:22 -07:00
  • 99499b78f9 Use Nix Python for TestFlight API key JSON Conrad Kramer 2026-06-07 19:09:36 -07:00
  • 13a0bc2fc6 Add dedicated TestFlight distribution workflow Conrad Kramer 2026-06-07 19:07:00 -07:00
  • 02b7509eaf Use workflow inputs for store upload gates Conrad Kramer 2026-06-07 19:04:22 -07:00
  • 86a60371d6 Add standalone TestFlight retry job Conrad Kramer 2026-06-07 19:01:31 -07:00
  • a075f5ca34 Allow TestFlight distribution retries Conrad Kramer 2026-06-07 18:59:29 -07:00
  • 2410de5e51 Extend TestFlight processing wait Conrad Kramer 2026-06-07 18:58:31 -07:00
  • dd7dc89341 Route public release storage domains Conrad Kramer 2026-06-07 18:37:47 -07:00
  • b06244e88c Disable optional AWS checksums for Garage uploads Conrad Kramer 2026-06-07 17:43:04 -07:00
  • 640d4693ac Sign Sparkle appcasts in Python Conrad Kramer 2026-06-07 16:56:18 -07:00
  • 1ef6fedeaf Seal Burrow Sparkle release key Conrad Kramer 2026-06-07 16:35:07 -07:00
  • 1d45016a63 Use Sparkle signer for full appcasts Conrad Kramer 2026-06-07 16:13:53 -07:00
  • a84922f4f3 Fix rcodesign notary key output Conrad Kramer 2026-06-07 15:53:15 -07:00
  • 4f765df2a9 Handle raw Google KMS signatures Conrad Kramer 2026-06-07 15:34:24 -07:00
  • 6867f26f19 Accept Developer ID G2 certificates Conrad Kramer 2026-06-07 15:16:01 -07:00
  • e5da3016ea Avoid project config during WIF auth Conrad Kramer 2026-06-07 14:47:31 -07:00
  • 65809da33a Map WIF runner client from audience Conrad Kramer 2026-06-07 14:15:59 -07:00
  • 5276b57c4d Fix WIF provider groups mapping Conrad Kramer 2026-06-07 13:54:02 -07:00
  • 51f34c9a64 Use client-only WIF runner grants Conrad Kramer 2026-06-07 13:34:53 -07:00
  • e7c0442a12 Fix Authentik WIF client credentials Conrad Kramer 2026-06-07 13:07:34 -07:00
  • 8180c3c35a Fix Authentik WIF token endpoint Conrad Kramer 2026-06-07 12:33:39 -07:00
  • 5ef4fdef64 Remove Python dependency from secret decrypt Conrad Kramer 2026-06-07 12:13:20 -07:00
  • ef7023f9be Prefer age for release secret decrypt Conrad Kramer 2026-06-07 11:56:04 -07:00
  • 83da429854 Make release secret decrypt find Nix tools Conrad Kramer 2026-06-07 11:35:37 -07:00
  • ec407be894 Use Forgejo-compatible artifact actions Conrad Kramer 2026-06-07 10:57:05 -07:00
  • ddbfa47587 Pass Apple Rust build tools into Bazel actions Conrad Kramer 2026-06-07 10:45:30 -07:00
  • 5150faad99 Move macOS Bazel cache outside checkout Conrad Kramer 2026-06-07 10:34:44 -07:00
  • 8e95014840 Fix CI toolchain selection Conrad Kramer 2026-06-07 10:26:14 -07:00
  • 06375ba328 Skip Namespace remote cache probe on macOS Conrad Kramer 2026-06-07 10:03:09 -07:00
  • 4a1ea9b471 Run Apple cache setup outside Nix shell Conrad Kramer 2026-06-07 09:57:54 -07:00
  • 2da04bc317 Make Namespace cache setup fail open Conrad Kramer 2026-06-07 09:51:35 -07:00
  • dba641035b Guard macOS Namespace fallback retries Conrad Kramer 2026-06-07 09:27:23 -07:00
  • e882a16dad Move Apple tester workflow to fresh runner labels Conrad Kramer 2026-06-07 09:12:37 -07:00
  • 4f8d58965b Extend Namespace dispatcher timeout Conrad Kramer 2026-06-07 09:05:05 -07:00
  • 4d7c19e593 Wait for Namespace runner terminal state Conrad Kramer 2026-06-07 08:57:28 -07:00
  • de32d8390e Use repo-built Forgejo Namespace services Conrad Kramer 2026-06-07 08:48:05 -07:00
  • 6b9065008d Use writable macOS runner workdir Conrad Kramer 2026-06-07 08:42:45 -07:00
  • 4e31d54a45 Make version helper CI-safe Conrad Kramer 2026-06-07 08:39:00 -07:00
  • 0a35d62e14 Fix Namespace macOS runner shape Conrad Kramer 2026-06-07 08:35:26 -07:00
  • a4db952d3f Fix Namespace Apple runner dispatch Conrad Kramer 2026-06-07 08:26:23 -07:00
  • 212b129c31 Add focused Apple tester distribution workflow Conrad Kramer 2026-06-07 07:52:30 -07:00
  • 126af6b5cf Wire Apple KMS release signing Conrad Kramer 2026-06-07 07:28:48 -07:00
  • ed73d7d16a Fix Nix cache bootstrap command Conrad Kramer 2026-06-07 06:03:14 -07:00
  • 0faaa806b6 Fix Forge Namespace runner scope Conrad Kramer 2026-06-07 05:58:28 -07:00
  • 002bd382e9 Wire Forge-native release infrastructure Conrad Kramer 2026-06-07 05:51:12 -07:00
  • 6c6bfe5434 Remove unused NetworkType::Trojan tombstone JettChenT 2026-06-05 17:06:01 -07:00
  • 4d1f589280 Expand Shadowsocks runtime compatibility JettChenT 2026-06-05 10:33:41 -07:00
  • d1638726ca Add proxy subscription runtime support JettChenT 2026-06-01 15:23:17 +08:00
  • 97c569fb35 Align GTK app with Apple home surface Conrad Kramer 2026-05-03 17:36:55 -07:00
  • 9244a0476a Fix Zulip SAML provisioning Conrad Kramer 2026-04-19 14:37:18 -07:00
  • 7540110713 Wait for Zulip supervisor before nginx patching Conrad Kramer 2026-04-19 14:09:26 -07:00
  • 836ccc93cd Patch Zulip uwsgi scheme at runtime Conrad Kramer 2026-04-19 14:04:42 -07:00
  • 6cd0f3b1ae Fix Zulip SAML callback scheme handling Conrad Kramer 2026-04-19 13:59:01 -07:00
  • eb9327a99f Map Burrow admins to Zulip owners Conrad Kramer 2026-04-19 03:43:57 -07:00
  • 5598fc18fc Enable Zulip SAML auto signup Conrad Kramer 2026-04-19 03:37:42 -07:00
  • 78d83c5079 Pin Zulip SAML ACS to https Conrad Kramer 2026-04-19 01:49:25 -07:00
  • 4c3dcdd17b Force https-only Zulip SAML login Conrad Kramer 2026-04-19 01:43:43 -07:00
  • 2af7618f52 Fix tailscale landing and zulip bootstrap Conrad Kramer 2026-04-19 01:31:45 -07:00
  • 142c2ef778 Allow postgres bootstrap to read generated SQL Conrad Kramer 2026-04-19 01:22:32 -07:00
  • 2ef804fa10 Use runuser for Zulip Postgres bootstrap Conrad Kramer 2026-04-19 01:20:55 -07:00
  • 601bedcc59 Fix Zulip Postgres bootstrap runtime Conrad Kramer 2026-04-19 01:19:01 -07:00
  • 42df7b5618 Run Zulip on host-managed services Conrad Kramer 2026-04-19 01:11:37 -07:00
  • fa2806e4b3 Bootstrap Zulip from the live app container Conrad Kramer 2026-04-19 00:59:34 -07:00
  • b70b62dfef Fix Zulip bootstrap user handling Conrad Kramer 2026-04-19 00:56:35 -07:00
  • 824bbd9d67 Run Zulip bootstrap non-interactively Conrad Kramer 2026-04-19 00:55:07 -07:00
  • b8cad4c028 Grant Tailnet access and harden Zulip bootstrap Conrad Kramer 2026-04-19 00:52:16 -07:00
  • 801e0fb419 Declare Zulip compose secrets Conrad Kramer 2026-04-19 00:30:08 -07:00
  • bd13ff3ee9 Bind Zulip memcached and RabbitMQ config files Conrad Kramer 2026-04-19 00:25:16 -07:00
  • 8ac1a5c70e Use unified tailnet launcher and fix Zulip RabbitMQ Conrad Kramer 2026-04-19 00:22:13 -07:00
  • 7567ab194b Fix Tailscale default app and Zulip metadata fetch Conrad Kramer 2026-04-19 00:16:51 -07:00
  • 44f437c33c Expose Tailscale and add Zulip SAML deployment Conrad Kramer 2026-04-19 00:13:10 -07:00
  • 7d3e7a6ec5 Make Linear SCIM object sync best-effort Conrad Kramer 2026-04-18 19:34:26 -07:00
  • 7421834ebc Relax Linear Authentik sync verification Conrad Kramer 2026-04-18 19:32:29 -07:00
  • 6dea4e4557 Fix Authentik Linear application patch paths Conrad Kramer 2026-04-18 19:30:06 -07:00
  • 4c12dafa6d Fix Linear SAML verification and reseal SCIM token Conrad Kramer 2026-04-18 19:26:55 -07:00
  • ebcfc4bf8d Add Linear SCIM role sync Conrad Kramer 2026-04-18 19:23:53 -07:00
  • 4d3257995b Add Authentik SSO apps for Linear and 1Password Conrad Kramer 2026-04-18 19:10:18 -07:00
  • 5a4fe58b86 Add Jett forge access and rekey secrets Conrad Kramer 2026-04-18 17:47:17 -07:00
  • 4f88f0b1e0 Align Burrow operator access on forge Conrad Kramer 2026-04-18 17:09:20 -07:00
  • abd5a35970 Make Jett a Burrow admin Conrad Kramer 2026-04-18 02:42:01 -07:00
  • c58d06dfc1 Move Burrow Google account aliases into agenix Conrad Kramer 2026-04-18 02:18:22 -07:00
  • bc85e256f2 Stabilize Forgejo site build Conrad Kramer 2026-04-09 20:59:31 -07:00
  • aa577c5616 Inline Forgejo workflow checkout Conrad Kramer 2026-04-06 04:22:34 -07:00
  • fbe8643914 Restart Forgejo runner when registration changes Conrad Kramer 2026-04-06 01:15:46 -07:00
  • 5e58aafb07 Align Forgejo runner labels with workflows Conrad Kramer 2026-04-06 01:12:47 -07:00
  • e2a2c73922 Install nsc on burrow forge host Conrad Kramer 2026-04-06 01:08:24 -07:00
  • 70607e874c Move forgejo-nsc credentials into agenix Conrad Kramer 2026-04-05 23:08:23 -07:00
  • e40a947223 Add forge-owned Namespace auth portal Conrad Kramer 2026-04-05 20:52:52 -07:00
  • 64103abbea Refocus Tailnet flow on Tailscale Conrad Kramer 2026-04-05 02:10:49 -07:00
  • 3ebb0a8e61 Fix tailnet auth flow provider lookup Conrad Kramer 2026-04-05 01:36:52 -07:00